PRIVACY & COOKIES POLICY
Privacy Policy
This Privacy Policy sets out the terms on which any information (including any personal data as defined by applicable data protection law) that is collected from you, or that you provide, through the website https://boutique.louvre.fr/ (the "Site") will be processed by us. Please read the following carefully to understand our practices regarding your personal data and how we will process it.
Your personal data is collected on the Site, on behalf of SFTC and the Louvre, by DIFY GROUP, RCS Rennes B 492 539 523, whose registered office is located at Z.I DE LA BELLEVUE, RUE BLAISE PASCAL 35220 CHATEAUBOURG, FRANCE.
Please click on the sections below for more information on our privacy policy:
WHO ARE WE?
CONTACT
DATA WE MAY COLLECT FROM YOU
DATA WE COLLECT FROM OTHER SOURCES
WHY YOUR DATA MAY BE USED
DISCLOSURES OF YOUR DATA
DATA RETENTION AND TRANSFER
COOKIES
SOCIAL NETWORKS AND OTHER THIRD PARTIES WHO PROVIDE CONTENT, ADVERTISING OR FUNCTIONALITY ON OUR SERVICES
CHILDREN
YOUR RIGHTS
YOUR PRIVACY RIGHTS IN CALIFORNIA
LINKS TO THIRD PARTY SITES
CHANGES TO OUR PRIVACY POLICY
USERS BASED IN THE EUROPEAN UNION
WHO ARE WE?
DIFYGROUP is the creator and manager of the Site on behalf of SFTC SARL and the Louvre.
SFTC SARL, domiciled at 61 Avenue de la République, 92120 Montrouge, FRANCE, registered with the Nanterre Trade and Companies Register under number 507 525 517 (hereinafter, "SFTC"), collects your personal data (hereinafter, the "Data") through the DIFYGROUP Site.
SFTC is intended to use and enjoy the Data both for the needs of after-sales service and for e-commerce marketing.
In addition, and subject only to the acceptance of the client (hereinafter, the "Client"), SFTC will transfer the Data to the public establishment of the Louvre Museum, domiciled at 34-36 quai François Mitterrand, 75001 Paris, FRANCE, identified in the INSEE under the SIREN number 180.046.237 (hereinafter, the "Louvre"), so that it may use the Data in the very specific context of information concerning the Museum's new products and offers relating to its activity.
SFTC and the Louvre are responsible for the processing of the Data in accordance with the provisions of the GDPR.
DIFYGROUP is, in the sense of the provisions of the RGPD, a subcontractor in the processing of the Data. DIFYGROUP will use your Data for the purposes and on the instructions of SFTC and the Louvre.
CONTACT
The Customer is informed that the Data Manager of DIFYGROUP is Mrs. Marie Menini.
All questions, comments and requests regarding this Privacy Policy can be made by clicking here, or by e-mail to the following address: privacy@difygroup.com.
Regarding any request for modification/deletion of or access to your Data, please see our GDPR & Personal Data page.
For questions, comments or requests not related to this Privacy Policy, please see the FAQ.
DATA WE MAY COLLECT FROM YOU
When you use the Site or contact us by email, social media, SMS, telephone or any other method, we may collect and process the following data about you:
Data that you provide to us, including :
in the forms you fill in on the Site (newsletter registration, creation of a customer account) ;
during any correspondence with us by telephone, e-mail or otherwise;
when you register on the Site;
when you subscribe to or place an order on the Site;
when you participate in chat rooms or use any other social networking feature on the Site;
when you enter a competition, promotion or survey; and
when you report a problem or request assistance in connection with the Site.
The Data you provide to us may include your first and last name, address, email address and telephone number, date of birth, payment information, photographs, images and comments.
The Data we collect about you whenever you visit the Site includes
technical information, including IP address, login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
information about your visit, including the full URL path to, through and from the Site (including date and time); and
the pages you viewed or searched for, page response times, download errors, length of visits to particular pages, information about interaction with pages (including scrolling, clicks and mouse-over) and methods used to leave the page.
We may also collect Data about the devices (including phones, computers, or other devices) from which you access and visit our Sites. Such Data may include unique device identifiers and mobile network information (including phone number), IP address, language and time zone, operating system, hardware version, device location (including specific geographic locations, such as through GPS, Bluetooth or WiFi signals).
SFTC and the Louvre, as data controllers, may, with your consent, collect, use, transfer, and store your Data in order to send you institutional information and to carry out statistical studies in connection with this Site.
The Data recorded is reserved for the use of SFTC and the Louvre and may be communicated to their subcontractors.
The Data collected in this way is kept for a period of three years from the last exchange.
Your rights and how to exercise them are detailed below in the dedicated section.
The Louvre's general policy on data protection is also available on the following page: Personal Data Protection Policy.
The Louvre's Data Protection Officer (DPO) since March 13, 2019 is the law firm Alain Bensoussan Selas, 58 boulevard Gouvion-Saint-Cyr, 75017 Paris, which can be contacted at the following email address paris@lexing.law.
The DPO of SFTC is Mr. Fabien Allègre, domiciled at 61 Avenue de la République, 92120 Montrouge, who can be contacted at the following email address fallegre@icloud.com.
DATA WE COLLECT FROM OTHER SOURCES
We also work closely with third parties (including, for example, business partners, technical, payment and delivery service providers, advertising networks, analytics providers, social networks, such as Facebook and Twitter, information retrieval service providers, rating agencies, third party login and social network integrators) and may receive Data about you from them.
If you choose to use features offered on this Site that connect to your online profiles, accounts or services (including social network accounts) ("Connected Accounts"), we may collect any Data for which you have provided permission from the settings used on such Connected Accounts. For example, if you log in to the Site using your Facebook account and choose to allow Facebook to share your profile with us, we may collect such Data. The Data we receive from logged-in Accounts includes email addresses, first and last name, location (city and country), gender, date of birth, "likes", posts or other activities on social networks. Please review the privacy settings of your Connected Account to control what Data is communicated to us through it.
WHY YOUR DATA MAY BE USED
We may use the Data held about you to:
respond to your requests;
provide you with information about products for sale on the Site; and
provide you, or enable certain third parties to provide you, with information about other products and services we offer which are similar to those you have already purchased or enquired about or which we think may be of interest to you;
make suggestions and recommendations to you and other users of the Site about products or services that may be of interest to you and them;
offer, or allow others to offer, targeted advertisements through the websites you visit about products or services that may be of interest to you;
measure or understand the effectiveness of the advertisements we send to you and others, and provide you with relevant advertisements;
track the progress and number of entries to competitions and promotional offers;
allow you to interact with the Site, for example, by posting comments, or to share information from the Site on third party social networking platforms;
to carry out our obligations under any contract between you and us and to provide you with information, products and services that you have requested from us;
administer your access to the Services or notify you of any changes to the Services;
to comply with legal and regulatory requirements;
administer the Site and carry out internal operations, including problem solving, data analysis, testing, research, statistics and surveys;
to improve the Site to ensure that the content is presented in the most effective manner for you; and
to ensure the security of the Site.
We may combine Data we receive from other sources with Data you provide to us and information we collect about you (including Data relating to your devices). We may use such combined Data for the purposes described above.
Data collected at the time of the order
The Data collected on this form by SFTC and the Louvre, the data processors, are necessary for the management of your order and their collection is based on the execution of the contract. Data relating to payments made in connection with purchases made are kept for a period of 13 months from the date of full payment for the said purchase, or 15 months in the case of deferred payment cards, in order to enable the management of any complaints.
In addition, and only on the basis of your consent, your Data may be used to send newsletters and to carry out statistical studies. They are kept for a period of 3 years from the last exchange.
It is intended for use by the relevant departments of the Louvre and SFTC, as well as its subcontractors, DIFYGROUP and Shopify (domiciled at 151 O'Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada, and registered under the number 426160-7).
Data collected for the creation of an account
The Data collected in this form by SFTC and the Louvre, which are responsible for processing it, is necessary for the creation and management of your personal space. Their collection is based on your consent. It is kept for a period of 3 years from the last exchange. It is intended for use by the relevant departments of the Louvre and SFTC, as well as by its subcontractors, DIFYGROUP and Shopify.
Recipients of the Data
The recipients of the Data are SFTC and the Louvre.
DISCLOSURE OF YOUR DATA
We may share your Data with third party companies, including:
business partners, suppliers and contractors in connection with the performance of any contract we have with you or with them for the purpose of providing you with a product or service
business partners, suppliers and contractors for the purpose of providing you with information about promotions and offers, subject to obtaining your consent where appropriate;
advertisers, advertising networks and social networks, who require the Data in order to select and deliver relevant advertisements to you and others. We may also use Aggregate Data and other information to enable advertisers to reach relevant audiences;
providers of search engines and analytics services that help us improve and optimise the Site; and
third parties where you have given your consent to such sharing or request it.
We may disclose your Data to third parties:
if DIFYGROUP, which controls this Site or substantially all of its assets, is acquired by a third party, in which case the Data it holds about its Customers will be one of the transferred assets;
if we are under a duty to disclose or share your Data in order to comply with any legal obligation or in order to enforce or apply our terms of use and other agreements; and
any other third party where it is lawful to do so.
DATA RETENTION AND TRANSFER
Any Data you provide may be processed and stored, transferred or accessed by entities around the world as specified in this policy. We will take all reasonable steps to ensure that your Data is treated securely and in accordance with this Privacy Policy. We have put in place technical and organisational procedures to protect the Data we collect on this Site.
Unfortunately, the transmission of Data over the Internet is not completely secure. While we are committed to doing everything we can to protect your Data, we cannot guarantee the security of any Data you transmit to the Site; any transmission is at your own risk.
COOKIES
The Site uses cookies and other tracking technologies to distinguish you from other users of the Site. These cookies and technologies allow us to provide you with a better experience when you browse the Site and to improve the Site. If you would like detailed information about the cookies and other technologies we use and the purposes for which we use them, please see our Cookie Policy below.
SOCIAL NETWORKS AND OTHER THIRD PARTIES WHO PROVIDE CONTENT, ADVERTISING OR FUNCTIONALITY ON OUR SERVICES
Some of the content, advertising and functionality on the Site may be provided by third parties with whom we are not affiliated. For example, you may be able to log in to the Site using login services such as Facebook Connect or an Open ID provider. These services verify your identity and offer to share certain Data with us. Services such as Facebook Connect offer to post Data about your activities on this Site to your profile page so that it can be shared with other users within your network.
Children
This Site is not intended for children (as that term is defined by French law) and DIFYGROUP does not knowingly collect Data from children without parental consent except where required by applicable law.
YOUR RIGHTS
You are entitled, in accordance with applicable law, to object to the processing or request restriction of the processing of your Data, and to request access, rectification, deletion and portability of your Data by contacting us as described in the "Contact" section above. In doing so, we may ask you to prove your identity.
You are entitled, in accordance with applicable law, to lodge a complaint with a supervisory authority if you believe that our processing of your Data is in breach of applicable law. You may also, in accordance with applicable law, set out post-mortem instructions.
It is your responsibility to keep your Data accurate and up to date. You can update your Data by contacting us using the procedure described in the "Contact" section above.
We will retain your Data for as long as your account is active or as long as necessary to provide the services to you. We will retain and use your Data to fulfil our legal obligations, resolve disputes and enforce our agreements.
If you wish to sign up to receive our newsletters, we will use your first and last name and email address to send them to you. You may opt out of receiving our newsletters or marketing emails by following the unsubscribe instructions included in such emails, by going to the email preferences tab in your account settings or you may contact us using the procedure described in the "Contact" section above.
You are free to withdraw your consent to the processing of your Data at any time, without affecting the lawfulness of the processing based on the consent given prior to the withdrawal of consent.
LINKS TO THIRD PARTY SITES
The Site, our newsletters and other communications may from time to time contain links to and from the websites of our partner networks, advertisers and affiliates. If you click on a link to any of these websites, please note that these websites have their own privacy policies and that we are not responsible for these policies.
CHANGES TO OUR PRIVACY POLICY
Any material changes we may make to our privacy policy will be posted on this page prior to the change taking effect and/or we will notify you via the Site or, if applicable, via email. Please check this page, this Site and your e-mail regularly for any updates or changes to our privacy policy.
USERS BASED IN THE EUROPEAN UNION
This section of this Privacy Policy applies only if you are using the Site from a Member State of the European Union and supplements the information contained in this Privacy Policy.
Legal basis for processing Data: We process Data for the purposes described in this Privacy Policy and set out above. The legal bases on which we rely to process Data include processing that:
is necessary for the performance of the contract between us such as to provide you with the services you request and to identify you and verify your identity so that you can use the Site;
is necessary to comply with legal requirements;
is necessary to manage our relationship with you and to improve the Site; and
is based on the consent of our Customers such as to communicate with you about our products and services and to provide you with marketing information. Your consent may then be withdrawn at any time (using the preference settings in the emails or on our Sites, or using this form, or by emailing us using the procedure described in the "Contact Us" section) without affecting the lawfulness of the processing based on consent obtained prior to its withdrawal.
In some cases, you may be asked to provide us with Data for processing purposes, as described above, so that we can enable you to use the full functionality of the Site.
International Transfers
In the course of sharing your Data in accordance with this Privacy Policy, we may transfer your Data outside the European Economic Area (EEA), to the United States, Canada and Australia. These transfers are governed by standard contractual clauses.
Where we transfer your Data outside the EEA, we will ensure that a similar level of protection is applied to that Data.
Cookie policy
INFORMATION ABOUT OUR USE OF COOKIES AND TRACKING TECHNOLOGIES
The Site uses cookies and similar technologies (as described below) to distinguish you from other users of the Site. These cookies and technologies allow us to provide you with a better experience when you browse the Site, to improve the Site, and to provide you with personalized content and advertising.
A cookie is a small file containing letters and numbers that we store on your browser or on your computer's hard drive with your consent. Cookies contain information that is transferred to your computer's hard drive.
The Site uses 4 types of cookies for the following purposes:
les cookies _ab ; _secure_session_id ; cart_sig ; cart_ts ; checkout_token ; Secret ; storefront_digest ; cookieconsent_status ; cookieconsent_preferences_disabled ; Cart ; Secure_customer_sig ; cart_currency ; cart_ver ; _shopify_m ;_shopify_tm ; _shopify-tw ; _tracking_consent ; checkout_locale et epb_previous_pathname which are necessary for the proper functioning of the Site ;
les cookies _atuvc ; _orig_referrer ; _shopify_fs ; shopify_s ; _shopify_sa_t ; _shopify_uniq ; _shopify_visit ; _shopify_y ; _y ; tracked_start_checkout ; _ga ; _gat ; _atuvc ; _atuvs ; _utma ; _shopify_d ; et _shopify_sa_p that allow the measurement of visitor traffic ;
les cookies _gads ; IDE ; _s ; GPS ; collect ; PREF ; BizoID ; _fbp ; _fbc ; _adroll ; _adroll_fpc ; _ar_v4 ; _adroll_v4 ; _gcl_au ; et _shopify_evids which are used by DIFYGROUP's partners to offer you targeted advertising; and
les cookies _gid ; et _cfduid that offer you additional functions and custom settings.
The table below provides more information about the types of cookies we use and the purposes for which we use them:
Please note that third parties (including, for example, advertising networks and external service providers such as web traffic analysis services) may also use cookies, over which we have no control. These cookies are typically analytics and/or performance cookies, or targeting cookies.
To exercise your rights, please refer to the "Your Rights" section of the Privacy Policy above.
We may use cookies to:
(i) collect anonymised Data about user behaviour on the Site. We may also record the site from which the user came to the Site, and to which site the user goes, as well as certain Demographic Data (e.g. the user's location) and we may use this Data to analyse user behaviour on different sites;
(ii) categorize groups of users (anonymously) on the basis of demographic and/or behavioral Data and use this Data to target our advertisements to users tracked by cookies on third-party websites, the louvre.fr website and the boutique.louvre.fr website.
Our Site may use Google AdSense to serve ads, including information about your demographics and interests. When you view or click on an advertisement, a cookie will be set to enable us to serve ads that may be of interest to you on this or other websites. You can choose not to accept the use of this cookie by visiting Google's Advertising and Privacy page: http://www.google.com/privacy_ads.html.
Most Internet browsers are automatically set to accept cookies. However, if you wish to refuse or delete a cookie (or similar technology), please consult the help and support section of your Internet browser for instructions on how to block or delete cookies. Please note that you may not be able to take advantage of all of the features of the Site, including certain personalized options, if you delete or disable cookies.
For more information on cookie management, please visit www.allaboutcookies.org, or www.youronlinechoices.eu for additional information on behavioural advertising and online privacy.
Web tags
We, or our third party partners, may use a software technology called "web beacons" (also known as spy pixels, web beacons, or clear GIFs) to help us understand what content is effective, for example, by counting the number of users who have visited these pages, and to understand usage patterns. Web beacons are small images with a unique identifier, similar in function to cookies, which are used to inform us when a page is viewed. Unlike cookies, which are stored on the user's computer hard drive, beacons are embedded in web pages, advertisements and emails. We, or our third party partners, may link the Data collected by web beacons to other Data we collect about you.
In addition to the ability to disable cookies and other tracking technologies, as described above, you may opt out of receiving targeted advertisements from participating ad networks, audience segment providers, ad server vendors, and other service providers by visiting the websites operated by the Network Advertising Initiative and the Digital Advertising Alliance.
Duration of validity of cookies
Data that is stored for RGPD acceptances and RGPD requests (any kind of information that may be requested through our Site, including deletion requests) will be deleted according to the deadlines expressed in the table above.